admin 8f029aa70b R-1126: the gate publishes the container it checked, by id (TOCTOU from the commit's security review) ...

web.SyncFileBrowserMounts can re-create FileBrowser between the check and the connect; a connect by name would publish
the new, unchecked container. The run is now "<id> <StartedAt>" and the connect targets that id.
TestFileBrowserGate_ConnectsTheCheckedContainerById, red-proved.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-17 12:59:43 +02:00

..

aftercrash

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

agentapi

v0.318.0: a part is offered for formatting only while nothing on its disk is mounted (agent 0.158.1 formattable)

2026-10-16 04:05:09 +02:00

api

R-970: the box's hub key opens no route; Data tab leftovers; R-1103: the install form's dead branches

2026-10-16 18:24:00 +02:00

appbackup

R-1110: the guard's census is 42 calls, not 41 (measured; comment and CHANGELOG)

2026-10-17 10:24:48 +02:00

appexport

v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

2026-10-05 07:13:02 +02:00

assets

fix: standardize log prefixes, remove duplicates, add missing module tags

2026-02-26 21:20:09 +01:00

backup

v0.325.0: share + escrow limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree

2026-10-17 09:36:34 +02:00

backupwindow

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

bootrecon

controller v0.242.0: a removed app is listed with its kept backup; five small ones (R-487 R-491 R-490 R-489 R-476 R-456)

2026-09-13 22:50:18 +02:00

bootstrap

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

channelhealth

R-271: the channel recovery after a controller restart is reported

2026-10-05 21:55:37 +02:00

cloudflare

fix: standardize log prefixes, remove duplicates, add missing module tags

2026-02-26 21:20:09 +01:00

config

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

crashboot

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

crypto

fix: P0+P1 critical bug fixes across controller (24 files)

2026-02-25 13:39:45 +01:00

dockerexec

R-35 (D4): dashboard sign-ins survive the controller's own restart; disk holds only a fingerprint

2026-10-08 14:49:27 +02:00

family

R-1112: open the family store when the controller starts

2026-10-17 09:56:12 +02:00

fillwatch

v0.309.0: the fill warning reaches the household in its own language; the root-filesystem disk event pinned end to end (R-521 F7)

2026-10-12 17:11:53 +02:00

i18n

FileBrowser is published only after its default login is checked (R-1126); the memory refusal says what to do (R-1125)

2026-10-17 12:49:34 +02:00

infra

FileBrowser is published only after its default login is checked (R-1126); the memory refusal says what to do (R-1125)

2026-10-17 12:49:34 +02:00

integrations

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

logx

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

mailrelay

v0.89.0: app-email plaintext-only listener (:2526) + split-From mapping

2026-06-29 13:13:40 +02:00

mediawire

v0.314.0: a restore puts the setup gate back as it was (R-1057); a test build moves with the floor (R-1053); Prowlarr links itself (R-1058); the box claims Plex by address (R-1060)

2026-10-15 14:34:33 +02:00

metrics

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

monitor

health check: the last six producers carry their dashboard sentence (R-79 option A, D3)

2026-10-08 14:49:27 +02:00

nightchain

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

notify

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

offsiteapply

v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

2026-10-04 07:27:38 +02:00

quiesce

controller (unreleased): R-921 check-first pre-check (no stop while another tier's job is in flight); R-922 email_cleared on a household's deliberate clear

2026-10-09 12:57:34 +02:00

recovery

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

report

v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

2026-10-12 15:13:59 +02:00

scheduler

Operator actions in the report reply (D1, R-314/R-279/R-177, decision 185)

2026-10-08 14:49:27 +02:00

selftest

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

selfupdate

v0.314.0: a restore puts the setup gate back as it was (R-1057); a test build moves with the floor (R-1053); Prowlarr links itself (R-1058); the box claims Plex by address (R-1060)

2026-10-15 14:34:33 +02:00

settings

v0.318.0: the internal data place, partitions, an honest whole-box backup offer (R-1084), sys_drive never offered (R-1082)

2026-10-16 03:57:49 +02:00

sockheal

v0.293.0: the controller heals itself after the guest's Docker socket is re-created (R-860)

2026-10-04 19:48:29 +02:00

stacks

R-1126: the gate publishes the container it checked, by id (TOCTOU from the commit's security review)

2026-10-17 12:59:43 +02:00

sync

R-616 (on top of R-615): the catalog clone stores no credentials

2026-10-05 23:12:59 +02:00

system

Media build part 1 (unreleased): real restart (R-1026), media apps on every PRESENT drive via an owned compose override (R-1023), dead-drive check from mountinfo, removal never deletes shared/:ro binds (R-1027), safety list knows userdata (R-1032), no drive question for media apps (R-1031)

2026-10-15 09:25:43 +02:00

util

v0.314.0: a restore puts the setup gate back as it was (R-1057); a test build moves with the floor (R-1053); Prowlarr links itself (R-1058); the box claims Plex by address (R-1060)

2026-10-15 14:34:33 +02:00

web

FileBrowser is published only after its default login is checked (R-1126); the memory refusal says what to do (R-1125)

2026-10-17 12:49:34 +02:00